Outreach privacy notice

Version 1.3.0, effective 14 November 2026. This notice replaces my earlier outreach notice.

1. Who I am

I am Dr Idris Maiga, writing to you as an individual (sole trader). I am the controller of your personal data, which means I decide how it is used.

Controller: Dr Idrissa Maiga, trading as Dr Idris Maiga (AI Savings Evidence), sole trader, Margarita Plaza, 81 Adelaide Street, Belfast BT2 8FF, United Kingdom. Contact: hello@savingsevidence.com. I have not appointed a Data Protection Officer.

2. What I hold about you

Your name, work email address, job title and organisation, and a record of our messages.

3. Where I got it

I found your details on your organisation's website or on a public professional profile, such as LinkedIn. I record where I found them. I never buy or rent contact lists.

4. Why I use it, and my legal basis

I use your details to contact business decision-makers about B2B services that may be relevant to their role, and to keep a do-not-contact list so that people who opt out are never contacted again.

Legal basis (UK GDPR and, where it applies, EU GDPR): Article 6(1)(f), my legitimate interest in offering my services to organisations, by contacting people whose published work role makes my services likely to be relevant to them. I have weighed this against your interests: I use only your work contact details, I write to you about your role, I send a small number of messages, and I stop as soon as you ask.

I keep the do-not-contact list on the basis of legitimate interests, and so that I comply with my legal duty to respect your objection.

I may note a simple priority to decide who to contact first, based on your published role and organisation. It is not an automated decision about you.

5. How I work, and who sees your data

I use AI tools to help me research public sources and draft messages. I review and send every message myself.

Recipients: My email routing and mailbox providers, my website host (Cloudflare) and my assistant service (Grok Bot). I do not sell or share your details for anyone else's marketing.

LinkedIn is the channel I use for LinkedIn messages. If we message on LinkedIn, LinkedIn holds those messages under its own privacy policy as a separate controller.

6. Transfers outside the UK

International transfers. If you are in the EU or EEA, details sent to me in the UK are covered by the European Commission's adequacy decision for the United Kingdom. Where my email, hosting or form providers process your details in the United States or elsewhere, the transfer is covered by the UK Extension to the EU-US Data Privacy Framework, for providers certified to it, or by standard data protection clauses approved for UK and EU transfers, as each provider publishes. You can ask me for details of the safeguards that apply.

7. How long I keep it

If you do not reply, I delete your details 12 months after my last message. If you reply, I keep our messages for up to 3 years after our last contact, so that I have a record of what we discussed. If you opt out, I keep only your email address on my do-not-contact list, indefinitely, so that I never contact you again.

8. Your rights

Your right to object is set out in the box at the top of this notice. You also have the right to access your data, to have it corrected or erased, to restrict how I use it, and to object to any use of your details that relies on my legitimate interests. To use any of these rights, reply to my message or email hello@savingsevidence.com. I will reply within one month. There is no charge.

9. Automated decisions

No decision about you is made solely by automated means.

10. Children

My outreach is aimed at business professionals. I do not knowingly contact anyone under 18.

If you are in the European Union or EEA

Where EU data protection law applies to my use of your details, it applies alongside UK law, and you have the rights described in this notice. I am based in the United Kingdom. I have not appointed a representative in the EU, because my processing of the details of people in the EU is occasional, does not include special category data and is unlikely to put your rights at risk (EU GDPR Article 27(2)). You can complain to the data protection authority in the EU or EEA country where you live or work.

11. Complaints

If you are unhappy with how I handle your data, you have the right to complain to me: reply to me or email hello@savingsevidence.com, and I will put it right. You also have the right to complain to the UK regulator, the Information Commission (still known as the ICO): https://ico.org.uk/make-a-complaint, helpline 0303 123 1113. You can complain to the data protection authority in the EU or EEA country where you live or work.

12. Changes to this notice

I may update this notice. The version line at the top shows when it last changed. If a change is significant, I will tell you before relying on it.